Privacy policy

Who is responsible for this website

This website, strateva.ai, is operated by Nicolae Filip Stanciu ("Strateva"), an independent quantitative research validation practice. For any privacy request you can write to stan@strateva.ai or, alternatively, contact me through the LinkedIn profile linked in the footer of this website.

What data is processed

This website has no user accounts and, apart from the optional scoping form described below, does not ask you for personal data.

Two preferences are stored only in your browser (localStorage) and are never transmitted to a server: your language choice and your cookie-consent choice.

Only if you accept analytics cookies, Google Analytics 4 processes usage data such as pages visited, approximate location derived from your IP address, and device and browser information, so that aggregate visit statistics can be produced.

Scoping form

Strateva offers an optional scoping form to describe a validation request. The form is provided through Tally (tally.so), which acts as the technical form provider (data processor), and it only loads after you explicitly click the contact button — nothing is requested from Tally before that.

I process the information you choose to submit through the scoping form — your full name, contact email, company or role, how you found Strateva, the service tier requested, the preferred timing, what you need the validation for, the format of the material, the instruments or markets and the decision frequency, the results you declare having obtained (Sharpe ratio, annual return, maximum drawdown, evaluated period, benchmark, costs already included and number of variants tried) and any additional comment you add — in order to respond to your request, assess the scope of the project, decide whether the engagement is feasible and prepare a possible proposal.

The form also lets you optionally attach technical material: code, a notebook, a repository or an extract of market data. That material is treated as your confidential information and is used solely to run the validation you requested. It is not shared with third parties, not published, and not reused in other engagements. Should the process ever incorporate third-party tooling to analyse the material, this policy will say so before that happens. Please do not attach credentials, API keys or third-party personal data: if any appear regardless, they are deleted as soon as they are detected.

Attached technical material is kept for a maximum of 7 calendar days from delivery of the report. That window exists so I can answer your questions about the verdict and review any discrepancy; after it, the material is deleted. If you would rather it were deleted sooner, just ask by email.

The legal basis is taking pre-contractual measures at your request (art. 6.1.b GDPR) and, where applicable, the legitimate interest in answering professional enquiries (art. 6.1.f GDPR). Contact data and the case description are kept while the request is open and, afterwards, only for as long as needed to meet legal obligations or defend a possible claim.

Hosting and technical logs

This website is hosted on Railway (Railway Corp., United States). When you access the site, the hosting infrastructure temporarily processes technical request data in HTTP access logs, such as your IP address, user agent, requested path, timestamp and request identifiers.

This processing is strictly needed to provide, secure and diagnose the service, on the basis of legitimate interest (art. 6.1.f GDPR). These logs are kept for the limited period defined by the hosting configuration and are not used to identify visitors or build profiles. As the provider is based in the United States, this technical data may be processed there under the applicable safeguards.

Purpose and legal basis of analytics

The only purpose of analytics is measuring how the website is used in order to improve it. The legal basis is your consent (art. 6.1.a GDPR), which is requested through the cookie banner before any analytics runs and can be withdrawn at any time from the cookie policy page.

Recipients and international transfers

Analytics data is processed by Google (Google Ireland Ltd. and Google LLC) as a processor. Google may transfer data to the United States under the EU–U.S. Data Privacy Framework and standard contractual clauses.

Retention

Technical material sent through the scoping form is kept for a maximum of 7 calendar days from delivery of the report. Google Analytics event data is retained for up to 14 months. The preferences stored in your browser remain until you delete them or withdraw consent.

Your rights

You can request access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to stan@strateva.ai (or, alternatively, through LinkedIn). You can also lodge a complaint with the Spanish supervisory authority (AEPD, www.aepd.es).

Changes to this policy

Any change to this policy will be published on this page with an updated date.